This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa File: 3139322e3134352e33372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: fmWoGyqdXt3RA0sS9MD2nJgdqw3YyNdd1FAgshC/nxE= Subject key identifier: 6F:F8:77:48:BA:B8:17:F8:E2:5D:2A:FC:98:B6:31:6E:9D:F2:48:0F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2787B0125AA8CB9B232AA6DD21B58761676337B0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:01 +0000 ROA not before: Fri 21 Nov 2025 15:44:01 +0000 ROA not after: Fri 20 Nov 2026 15:49:01 +0000 asID: 51167 IP address blocks: 192.145.37.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:87:b0:12:5a:a8:cb:9b:23:2a:a6:dd:21:b5:87:61:67:63:37:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:01 2025 GMT Not After : Nov 20 15:49:01 2026 GMT Subject: CN=6FF87748BAB817F8E25D2AFC98B6316E9DF2480F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:1b:a2:ac:eb:21:56:cb:fd:9a:81:d1:8a: e0:07:35:5e:cd:a5:f0:4b:05:bd:df:4e:a3:6a:f1: 4e:ea:3f:88:68:75:77:de:c7:2c:ec:3f:01:47:7a: 87:2d:cf:0e:dd:75:9d:c3:de:31:0f:b5:19:a4:12: 75:7e:57:1a:a5:aa:cc:da:3b:91:38:21:59:8c:69: b2:0d:64:18:8d:44:ce:ff:1b:2b:5d:60:09:bb:2b: a1:ec:db:78:70:da:f7:c1:e4:18:a5:e7:bc:7d:2f: 8c:9e:3e:a5:bd:6a:34:d0:95:d0:05:ca:2d:ec:31: 34:2b:42:21:d5:2d:a1:14:53:d0:6e:58:7b:31:5f: c9:48:ad:13:67:e4:13:91:38:f5:b4:5e:fd:90:b9: 79:13:a6:f9:f4:c7:32:32:a9:67:f2:4f:bd:b3:f6: b4:5a:57:ab:b8:68:44:3f:65:e6:1d:af:7b:57:83: 5c:37:72:4e:26:e8:85:a4:49:3e:d3:16:79:3d:58: 3e:37:76:8f:2a:3f:f0:12:92:63:50:03:99:c8:32: 1c:d0:7e:d4:72:67:09:62:67:1d:2e:1c:00:cb:a5: 30:a5:c2:70:0f:0d:2b:93:f5:fd:60:c3:83:d2:bb: 18:5a:9c:0f:83:2a:c1:b9:ef:c8:54:27:96:28:72: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:77:48:BA:B8:17:F8:E2:5D:2A:FC:98:B6:31:6E:9D:F2:48:0F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.37.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:77:9a:69:41:0b:0b:22:fd:ff:7c:a2:4a:0b:d8:58:14:15: 5d:4e:84:b2:bb:24:0a:64:aa:52:ff:d2:b7:50:4f:6d:b8:d7: a3:4a:ee:e3:4d:26:a9:f0:35:40:bd:1a:78:a5:65:12:6a:11: b8:60:eb:ea:f3:46:ee:5a:c9:44:68:82:cb:dd:ee:19:e7:9a: af:07:5a:ee:f9:a2:2a:c0:7a:3c:8d:be:77:7c:1f:e5:2e:90: d8:9b:7f:31:9e:38:fe:d7:92:f4:32:c3:68:57:7c:8c:6d:17: 5a:dd:71:b3:99:48:2a:97:c5:8e:55:82:49:ad:9d:0b:a4:ab: c1:c2:35:a2:d8:56:4a:a2:e0:0a:c6:6f:f4:13:e5:4a:8b:3c: ba:c1:d3:fa:b9:c2:4e:fc:50:91:6c:f0:6c:90:ec:2c:59:94: c0:42:98:65:92:87:cb:0f:d5:14:46:b7:30:bd:24:6e:9a:03: 66:42:f2:e4:a6:79:e5:7b:60:ea:9b:41:ea:2c:ca:8e:49:6b: 10:7a:77:8c:d3:85:ad:7d:a7:e2:53:2e:c1:3c:bd:19:3e:2f: 8c:ed:c2:b8:f1:24:a4:bd:e0:3a:dc:ac:76:9d:de:38:4a:55: a7:29:4e:11:33:d4:55:37:07:98:ef:a1:22:93:d2:9f:f0:28: 27:31:02:46 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUJ4ewElqoy5sjKqbdIbWHYWdjN7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDFaFw0yNjExMjAxNTQ5MDFaMDMxMTAvBgNV BAMTKDZGRjg3NzQ4QkFCODE3RjhFMjVEMkFGQzk4QjYzMTZFOURGMjQ4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JRuirOshVsv9moHRiuAHNV7N pfBLBb3fTqNq8U7qP4hodXfexyzsPwFHeoctzw7ddZ3D3jEPtRmkEnV+Vxqlqsza O5E4IVmMabINZBiNRM7/GytdYAm7K6Hs23hw2vfB5Bil57x9L4yePqW9ajTQldAF yi3sMTQrQiHVLaEUU9BuWHsxX8lIrRNn5BOROPW0Xv2QuXkTpvn0xzIyqWfyT72z 9rRaV6u4aEQ/ZeYdr3tXg1w3ck4m6IWkST7TFnk9WD43do8qP/ASkmNQA5nIMhzQ ftRyZwliZx0uHADLpTClwnAPDSuT9f1gw4PSuxhanA+DKsG578hUJ5YocujlAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUb/h3SLq4F/jiXSr8mLYxbp3ySA8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz NTJlMzMzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADAkSUwDQYJKoZIhvcNAQELBQADggEBAC53mmlBCwsi/f98okoL2FgUFV1O hLK7JApkqlL/0rdQT22416NK7uNNJqnwNUC9GnilZRJqEbhg6+rzRu5ayURogsvd 7hnnmq8HWu75oirAejyNvnd8H+UukNibfzGeOP7XkvQyw2hXfIxtF1rdcbOZSCqX xY5VgkmtnQukq8HCNaLYVkqi4ArGb/QT5UqLPLrB0/q5wk78UJFs8GyQ7CxZlMBC mGWSh8sP1RRGtzC9JG6aA2ZC8uSmeeV7YOqbQeosyo5JaxB6d4zTha19p+JTLsE8 vRk+L4ztwrjxJKS94DrcrHad3jhKVacpThEz1FU3B5jvoSKT0p/wKCcxAkY= -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:53 2025 by rpki-client